last executing test programs: 4m51.663773966s ago: executing program 4 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) 4m17.356140023s ago: executing program 4 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) 4m17.356083531s ago: executing program 4 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) 4m17.35603262s ago: executing program 4 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) 4m17.35598667s ago: executing program 4 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) 4m14.850896518s ago: executing program 4 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) 4m14.342768266s ago: executing program 32 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d00010000000000fdffffff03000080450011802fe5afbf24fbcccc554cd9761e93b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9aeb43dc1680e70876b651bcdbd"], 0x5c}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) 49.485020984s ago: executing program 1 (id=2903): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.179722237s ago: executing program 1 (id=2903): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.179672074s ago: executing program 1 (id=2903): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.1796327s ago: executing program 1 (id=2903): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.179594471s ago: executing program 1 (id=2903): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.431942836s ago: executing program 0 (id=3939): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4.132012592s ago: executing program 2 (id=3943): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x2, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}}, 0x3a) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0xa, 0xffffffff, 0x11}, 0x10) 3.938705666s ago: executing program 2 (id=3945): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000031400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, r6, 0x615, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffda6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MAP={0x24, 0xe, {0x0, 0x1}}]}, 0x6c}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xc9, 0x4, 0x4e25, 0x4, 0x3, 0x1, 0x4a69, {0x0, @in6={{0xa, 0x4e24, 0x7fff, @empty}}, 0x400, 0xffffff7b, 0x9, 0x4, 0x3}}, &(0x7f0000000480)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x87f8}, 0x10}, 0x94) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/63, &(0x7f0000000080)=0x3f) connect$pptp(r3, &(0x7f0000000680)={0x18, 0x2, {0x0, @empty}}, 0x1e) 3.162035211s ago: executing program 2 (id=3950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x2a, 0x0, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x20000894) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2b0, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x29c, 0x1, [@m_bpf={0xa4, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x66, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a66604265b59ed90ce6980eda6d48215f2ed37642646c6855209b52b2022e8a84579e285da1af65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0xd4, 0x10, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x2, 0x8, 0xb, 0x7}, 0xe}}]}, {0x6e, 0x6, "51faf7335320ed7b354230acb137694145a70ec11e2f79535356bbabe75c1cf43e9599937f1222c821355d08c9296f647da3cee86f1d1307ada4d0439b9958f20eb60a1d09a36a8e8fe2b40dee67235407cc32d0443c90f719783f20e6af042b71dbe4822e96811047bc"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x4c, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe215, 0x7fffffff, 0x5, 0x7, 0xd}, 0x70}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xd4, 0x9, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xe}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_TYPE={0x6, 0x5, 0xb5}]}, {0x35, 0x6, "506b79286f2a784168a7ea29de088958db7e6090c3a4635eb7f502f55c76db5f31e2bdca6e9a18b8d44fceec06064d25f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect$rose(r5, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x1fffffffffffffbd, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 2.936082345s ago: executing program 0 (id=3952): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000f0000006a0a00ff000000000c00000000020000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.934324817s ago: executing program 2 (id=3953): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 2.813289244s ago: executing program 0 (id=3955): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xd0, &(0x7f00000008c0)=0x83, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000fe8e4bc2000000000000000000"], 0x48) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="1802000005000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000003d75fcff736d36554d360000fcffffffbf91000000000000b70200000200000085000000819fd048b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="e1d73a8257d0d48a60ed8fddd6b75d070000000000000000e000"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000640)=0x2) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000001980)=ANY=[@ANYBLOB="182f000040000000181127af46253eb1ade2654ff79a4ef7ca36d9426dc9582cf3e6ee7b45cc0b9f4ecb587cbbb27f9a7d86ae2e5bb314260e4d91fd58ef526c207d05025b884e3b7ce9dfa527d20919cb4ee3fa7cdf2df487ed55bd2323ed8ea7b0a3bc7e5ad13a6c166a3024978476f48f86bed52ab03b719b80b304bdb64f8b9388811e48b6b60796bba189e7b5c219a7f5f6509716defa5b0279b773d48a215305bc6105df6debcf85a4ed6f8891542427ee7c0bc05786655a9401a7368e1bd1c4ad77f7f63750c2b70cacd4888adfe4659e701cd5", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003c770c0001000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0002000000001000000000000000ccc1ef4633d9332d4c2840365d9c437bfeb8c9b81573d7b6fed999a4953927413c6a263e2701911696be03f96e8c27d211590caa1fc19c294d39493e72ac1c5aad8da1967a240b5eb7e9218cef5dc1c7a44bee0a529116b82c52b7eb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r7, &(0x7f0000000000)="f4", &(0x7f00000000c0)=""/85}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000280)="1016522287c758ea2a800404d461132c9e07b6d46be09fb965e0b66c5ca45f6bae34ab0c027c737b32d07f1cf2b0f12a3775ed479f387df914c4564c8b3c42aab97957f9b9d2fc8a876b72ba9b6f039cdf9364fac5ea91098bd8e956c4843f34c85dff59c58290523dda2b2110d0ef2acdb33a59f24f5e922da4c6f6a5ecf094a1eb443fb632ba7a3bd8d5365397607a9763bee2b0b44e6a7404397a47c92cc1f0a3e81bc24196651b919411b86d7cfba345fcc64a4f01d032196a166cb24c33e8ee7670352465ea1f83d0eef215b156d2c7f2f4417631a34925bbd11daa984330a8e2de6400eb83f8d2465588a72eb6", &(0x7f0000000180)=""/9, &(0x7f0000000900)="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", &(0x7f0000000200)="899397ecd63f92db564e43f5af4f264c8cee90c82afc127dbc0b9b", 0x2, r8, 0x4}, 0x38) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x60400, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000005c0)={'sit0\x00', @multicast}) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000000c0)=0xaa5, 0x4) sendmsg$can_raw(r10, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) socket$pppl2tp(0x18, 0x1, 0x1) 2.713313068s ago: executing program 5 (id=3956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0xff81}, 0x8) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) 2.643984585s ago: executing program 3 (id=3957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xce, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x63}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x0) 2.643431876s ago: executing program 0 (id=3958): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f00000000c0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001f40)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES32=0x0], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f00000000c0)=""/83, 0x53) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="1404794f", @ANYRES16=r6, @ANYBLOB="110727bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000001ec0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x1000, 0x1, 0x2d}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c044}, 0x20040002) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = accept$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c) bind$inet6(r9, &(0x7f0000000300)={0xa, 0x4e23, 0xc9, @private1, 0xffff}, 0x1c) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r10, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) readv(r2, &(0x7f0000000840)=[{&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/153, 0x99}, {&(0x7f00000003c0)=""/65, 0x41}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2.624076532s ago: executing program 2 (id=3959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000fa0b0018"], 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x1, 0xfffffffe, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.534824489s ago: executing program 5 (id=3960): bpf$MAP_CREATE(0x0, 0x0, 0x75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYRES8], 0x0) 2.444008819s ago: executing program 3 (id=3961): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.405861724s ago: executing program 1 (id=2903): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.385321608s ago: executing program 5 (id=3962): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x298, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x284, 0x1, [@m_bpf={0xa4, 0xa, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x66, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a66604265b59ed90ce6980eda6d48215f2ed37642646c6855209b52b2022e8a84579e285da1af65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0xd4, 0x810, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x2, 0x8, 0xb, 0x7}, 0xe}}]}, {0x6e, 0x6, "51faf7335320ed7b354230acb137694145a70ec11e2f79535356bbabe75c1cf43e9599937f1222c821355d08c9296f647da3cee86f1d1307ada4d0439b9958f20eb60a1d09a36a8e8fe2b40dee67235407cc32d0443c90f719783f20e6af042b71dbe4822e96811047bc"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x4c, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe215, 0x7fffffff, 0x5, 0x7, 0xd}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xbc, 0x9, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xe}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_TYPE={0x6, 0x5, 0xb5}]}, {0x35, 0x6, "506b79286f2a784168a7ea29de088958db7e6090c3a4635eb7f502f55c76db5f31e2bdca6e9a18b8d44fceec06064d25f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x8, 0x4) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.267054484s ago: executing program 3 (id=3963): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030f000000000000000008000000"], 0x14}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="7d1fa591cb9d851c7f7c961f2ac8bf451a4bcdc466000000000000117914021d38919e47561a36ced32707f09c04d196011573ca4b896376ee953d86bf85baef17a1523165bfe3c2a2b1f4a362adaf31bcf6c25f51eea7ca915deff112162b1a51ff2bc9b2ef8866f91c485e6cd833526cc6bba8a044d3c0306722bde4400a433a20ac26d476fddfb3672a7a0baf7ca5cdd3bdc97dd8", 0x96}], 0x1) r5 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e23, 0xd, @private2, 0xb}}, 0x0, 0x0, 0xa, 0x0, "2dd7cfdf642e1b197454b725033af6922dadc883c4fe41b70f115b813cf152948525252465eac4a27187b07daf0f95f7a0cfa23d483cea085dc67a5441d76acc5b7a6fae74ebb4ace86e92b286e3f0a8"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x4008010, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) close(0xffffffffffffffff) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r9) 634.957868ms ago: executing program 0 (id=3964): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000ff0000ff0200000000000000000000000000014f194e20"], 0x4b) 634.592352ms ago: executing program 2 (id=3965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c0005"], 0x108}}, 0x24040800) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) getsockname$ax25(r3, &(0x7f0000000200)={{0x3, @default}, [@remote, @default, @default, @remote, @null, @null, @default, @null]}, &(0x7f0000000180)=0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r5, 0x809}, 0x14}}, 0x4) 630.775549ms ago: executing program 3 (id=3966): r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x11) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 630.079052ms ago: executing program 5 (id=3967): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1f1441, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47c0a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}]}}}]}, 0x3c}}, 0x0) 454.131634ms ago: executing program 3 (id=3968): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 388.04622ms ago: executing program 5 (id=3969): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller1\x00'}]}}]}, 0x88}}, 0x24040084) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000000)=""/248, 0xf8) 134.281032ms ago: executing program 5 (id=3970): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x9, 0x2}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x8000, 0xd}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x380, @private1, 0x101}}, 0x5, 0x8, 0x1, 0x61, 0x20, 0x0, 0x4}, 0x9c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e24, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x10, 0x1}, 0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000440)={r1, 0x8e, "42fc958c005d938bf83075fd6ad0d83ff15a4b2add4f15d918bf82219298769d2287f7cb9e25a873e00ffe2fe67f50d898e5af8ab67a606df674c2c37acca792ce364394e90258711aa98901ddb0c565129f91b16ce43c331a7c35b65eaeffdb4b8eb161f7b76c999ecca9fc9ba483dd5664f2386fcc8cff20c1dfa029378f2c5589384a8388a36172ca82626acf"}, &(0x7f0000000500)=0x96) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r1, @in6={{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}}}, 0x84) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000600)={0x3, 0xee, "d745188f9855cf3ad180ade69b0d1c19a01c17dfc354faf8fa361555832f59ab59cee2df70c41aaf8ecf0d5ee15d2da33b7f59c9892723f12f2527b8c5db2471d7bb26d24d8183c06a1e7f1def401866b32c5941717fd15b0b6dea6cf812cd36e3530ed28ccf2bb1c58ea475961ea1dec3a896912891b6f74d45b7e2f5fdcc22fc75915731d159443615f63f2292ee29f926cc4864a702e555ba48858821c60563e1305736e45eef5c734eb1248c391a4842c4b26a39de052a6f720cc4e8e98ea39236c84f3c53ef2d51127c6642c6e649f2c9746ef060e4b96100baab55785b0a3fcdfef9039c9f972ff65da342"}) getsockname$inet(r5, &(0x7f0000000700)={0x2, 0x0, @broadcast}, &(0x7f0000000740)=0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x0, 0x30, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x50, 0x0, 0x80000001}}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r5) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl0\x00', r6, 0x4, 0xa, 0xe, 0x2, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8, 0x40, 0x6, 0x2}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xfffffff5}]}, 0x84}, 0x1, 0x0, 0x0, 0x40090}, 0x4008080) r10 = accept4$inet(r5, 0x0, &(0x7f0000000b00), 0x80000) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000b40), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffb}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'veth0_to_bond\x00', 'dvmrp0\x00', {0xff}, {}, 0x5c, 0x2}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x7, 0x1, 0x7], 0x2}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000f00)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6a}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'geneve1\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xf4, r7, 0x410, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x4402) connect$inet6(r4, &(0x7f0000001140)={0xa, 0x4e21, 0x2, @loopback, 0x1}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfff}}, 0x0, 0x0, 0x4b, 0x0, "8cfefe65db1c41f6e43abc4147cfdc0b2445e69d7bbce5e85f5dbcacdb4c5d296863f396eca38dd7f00863ea0f39a975c4af29ad2cbe40a3f060c74864bd07a2e978d07a4927ab8a9c4043ba436644ea"}, 0xd8) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000001280)=0xc452, 0x4) 120.660605ms ago: executing program 3 (id=3971): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) 0s ago: executing program 0 (id=3972): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/8, 0x8}], 0x1}, 0x40010043) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): ode [ 413.857216][T16130] veth1_vlan: left promiscuous mode [ 413.863123][T16130] veth0_vlan: left promiscuous mode [ 414.414938][T16130] team0 (unregistering): Port device team_slave_1 removed [ 414.466361][T16130] team0 (unregistering): Port device team_slave_0 removed [ 414.991610][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.999013][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.006864][T16680] bridge_slave_1: entered allmulticast mode [ 415.019625][T16680] bridge_slave_1: entered promiscuous mode [ 415.188240][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 415.225127][T16784] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 415.234203][ T5840] Bluetooth: hci1: command tx timeout [ 415.242338][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3187'. [ 415.283063][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.297052][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.438971][T16794] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3188'. [ 415.493224][T16680] team0: Port device team_slave_0 added [ 415.518966][T16798] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 415.534210][T16680] team0: Port device team_slave_1 added [ 415.555473][T16798] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 415.688221][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 415.822542][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.850310][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.866381][T16810] netlink: 'syz.0.3193': attribute type 1 has an invalid length. [ 415.899394][T16810] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3193'. [ 415.904404][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.931070][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.943068][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3193'. [ 415.952807][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.984358][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.997626][T16813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3195'. [ 416.138395][T16821] netlink: 'syz.0.3197': attribute type 10 has an invalid length. [ 416.198724][T16821] batman_adv: batadv0: Adding interface: team0 [ 416.218733][T16821] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.222883][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3199'. [ 416.253146][T16821] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 416.405891][T16831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3201'. [ 416.461291][T16680] hsr_slave_0: entered promiscuous mode [ 416.477350][T16680] hsr_slave_1: entered promiscuous mode [ 416.507998][T16680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.517598][T16680] Cannot create hsr debugfs directory [ 416.615372][T16130] tipc: Resetting bearer [ 416.711888][T16850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3200'. [ 416.914698][T16130] bond2 (unregistering): (slave gretap2): Releasing active interface [ 417.253193][T16130] tipc: Disabling bearer [ 417.311011][ T5840] Bluetooth: hci1: command tx timeout [ 417.666878][T16130] bond0 (unregistering): Released all slaves [ 417.684010][T16130] bond1 (unregistering): Released all slaves [ 417.815073][T16130] bond2 (unregistering): Released all slaves [ 417.933901][T16130] bond3 (unregistering): Released all slaves [ 417.951491][T16130] bond4 (unregistering): Released all slaves [ 418.052222][T16848] batman_adv: batadv0: Removing interface: team0 [ 418.117805][T16848] vlan3: left allmulticast mode [ 418.136285][T16848] bond0: left allmulticast mode [ 418.142610][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.155936][T16848] vlan3: left promiscuous mode [ 418.161695][T16848] bond0: left promiscuous mode [ 418.167015][T16848] bridge0: port 1(vlan3) entered disabled state [ 418.348870][T16853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.370541][T16853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.390697][T16853] bond0 (unregistering): Released all slaves [ 418.465316][T16130] tipc: Left network mode [ 418.490634][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.550205][T16130] IPVS: stopping backup sync thread 7991 ... [ 418.619883][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.813637][T16874] netlink: 'syz.3.3213': attribute type 1 has an invalid length. [ 418.837765][T16874] netlink: 'syz.3.3213': attribute type 4 has an invalid length. [ 418.879616][T16874] netlink: 'syz.3.3213': attribute type 1 has an invalid length. [ 418.893230][T16874] netlink: 'syz.3.3213': attribute type 4 has an invalid length. [ 419.150457][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.392198][ T5840] Bluetooth: hci1: command tx timeout [ 419.481201][T16130] hsr_slave_0: left promiscuous mode [ 419.505960][T16130] hsr_slave_1: left promiscuous mode [ 419.537744][T16130] pimreg (unregistering): left allmulticast mode [ 420.969735][T16910] netlink: 'syz.3.3224': attribute type 2 has an invalid length. [ 421.025710][T16912] : entered promiscuous mode [ 421.150537][T16680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.201146][T16922] __nla_validate_parse: 6 callbacks suppressed [ 421.201170][T16922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3230'. [ 421.207489][T16680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.262394][T16680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.296228][T16680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 421.350331][T16931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3232'. [ 421.364260][T16929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3231'. [ 421.615641][T16130] IPVS: stop unused estimator thread 0... [ 421.701994][T16949] sctp: [Deprecated]: syz.0.3236 (pid 16949) Use of int in max_burst socket option. [ 421.701994][T16949] Use struct sctp_assoc_value instead [ 421.742818][T16949] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3236'. [ 421.790489][ T5857] Bluetooth: hci2: command 0x0405 tx timeout [ 421.963050][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.022343][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.036150][T16963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3240'. [ 422.051695][T16130] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.058970][T16130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.088425][T16130] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.095696][T16130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.462400][T16984] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3245'. [ 422.640269][T16989] lo speed is unknown, defaulting to 1000 [ 422.778210][T17000] Cannot find del_set index 17 as target [ 422.872488][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.042006][T16680] veth0_vlan: entered promiscuous mode [ 423.082273][T16680] veth1_vlan: entered promiscuous mode [ 423.100412][T17006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3253'. [ 423.111044][T17006] netlink: 'syz.5.3253': attribute type 10 has an invalid length. [ 423.118915][T17006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3253'. [ 423.121777][T16680] veth0_macvtap: entered promiscuous mode [ 423.182465][T17006] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 423.222179][T16680] veth1_macvtap: entered promiscuous mode [ 423.288284][T17010] netlink: 'syz.2.3256': attribute type 11 has an invalid length. [ 423.371205][T17013] tipc: Enabled bearer , priority 0 [ 423.423335][T17014] syzkaller0: entered promiscuous mode [ 423.428870][T17014] syzkaller0: entered allmulticast mode [ 423.435472][T17014] tipc: Resetting bearer [ 423.444496][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.490864][T17014] tipc: Resetting bearer [ 425.007111][ T67] wlan1: Trigger new scan to find an IBSS to join [ 425.373976][T17014] tipc: Disabling bearer [ 425.391125][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.440559][T16680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.458687][T16680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.499450][T16680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.505215][T17034] x_tables: duplicate underflow at hook 1 [ 425.508210][T16680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.756494][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3267'. [ 425.786032][T17044] netlink: 'syz.5.3267': attribute type 5 has an invalid length. [ 425.842853][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.861301][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.972405][T17059] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3271'. [ 425.977739][T16130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.026856][T16130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.377178][T17070] macvlan2: entered promiscuous mode [ 426.399793][T17070] macvlan2: entered allmulticast mode [ 426.603676][T17086] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3281'. [ 426.606801][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 426.922318][T16115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.178301][T16115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.392264][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.402597][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.411291][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.424742][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.433700][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.466823][T17095] lo speed is unknown, defaulting to 1000 [ 427.508596][T16115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.590756][T16115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.817210][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 428.029897][ T67] wlan1: Trigger new scan to find an IBSS to join [ 428.083761][T16115] bridge_slave_1: left allmulticast mode [ 428.099114][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3290'. [ 428.100784][T16115] bridge_slave_1: left promiscuous mode [ 428.147245][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.198208][T16115] bridge_slave_0: left allmulticast mode [ 428.224774][T16115] bridge_slave_0: left promiscuous mode [ 428.256060][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.329756][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.341590][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.352581][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.362029][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.371100][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.965358][T16133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.983998][T17126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3292'. [ 429.206800][T16115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.221087][T16115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.225754][T17139] netlink: 'syz.5.3294': attribute type 4 has an invalid length. [ 429.241255][T16115] bond0 (unregistering): Released all slaves [ 429.297958][T17140] netlink: 'syz.5.3294': attribute type 4 has an invalid length. [ 429.331537][T17137] netlink: 'syz.5.3294': attribute type 1 has an invalid length. [ 429.366098][T17137] netlink: 'syz.5.3294': attribute type 1 has an invalid length. [ 429.470143][ T5857] Bluetooth: hci1: command tx timeout [ 429.537535][T17142] veth5: entered allmulticast mode [ 429.602919][T17117] lo speed is unknown, defaulting to 1000 [ 429.767561][T17095] chnl_net:caif_netlink_parms(): no params data found [ 429.946580][T17158] bridge: RTM_NEWNEIGH with invalid ether address [ 430.165096][T17095] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.179390][T17095] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.199702][T17095] bridge_slave_0: entered allmulticast mode [ 430.213848][T17095] bridge_slave_0: entered promiscuous mode [ 430.283726][T17171] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3304'. [ 430.294898][T17095] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.302493][T17095] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.312982][T17095] bridge_slave_1: entered allmulticast mode [ 430.346791][T17095] bridge_slave_1: entered promiscuous mode [ 430.440166][ T5857] Bluetooth: hci3: command tx timeout [ 430.599795][T16115] hsr_slave_0: left promiscuous mode [ 430.613332][T16115] hsr_slave_1: left promiscuous mode [ 430.623951][T16115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.634749][T16115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.650286][T16115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.669259][T16115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.753064][T16115] veth1_macvtap: left promiscuous mode [ 430.758872][T16115] veth0_macvtap: left promiscuous mode [ 430.765145][T16115] veth1_vlan: left promiscuous mode [ 430.770635][T16115] veth0_vlan: left promiscuous mode [ 431.363707][T16115] team0 (unregistering): Port device team_slave_1 removed [ 431.416632][T16115] team0 (unregistering): Port device team_slave_0 removed [ 431.551423][ T5857] Bluetooth: hci1: command tx timeout [ 431.870338][T17095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.945516][T17095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.046450][T17196] bridge0: port 3(batadv2) entered blocking state [ 432.076693][T17196] bridge0: port 3(batadv2) entered disabled state [ 432.088414][T17196] batadv2: entered allmulticast mode [ 432.104133][T17196] batadv2: entered promiscuous mode [ 432.165819][T17200] netlink: 'syz.2.3311': attribute type 4 has an invalid length. [ 432.213318][T17095] team0: Port device team_slave_0 added [ 432.228058][T17204] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3313'. [ 432.242627][T17095] team0: Port device team_slave_1 added [ 432.383137][T17215] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3317'. [ 432.416886][T17095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.425344][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.484893][T17095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.503361][T17215] 0ªX¹¦D: renamed from gretap0 (while UP) [ 432.520273][ T5857] Bluetooth: hci3: command tx timeout [ 432.539620][ T67] batman_adv: batadv2: IGMP Querier appeared [ 432.546108][ T67] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 432.575214][T17215] 0ªX¹¦D: entered allmulticast mode [ 432.584692][T17215] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 432.693283][T17095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.718164][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.720067][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3322'. [ 432.760619][T17095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.938199][T17095] hsr_slave_0: entered promiscuous mode [ 432.955875][T17095] hsr_slave_1: entered promiscuous mode [ 432.964307][T17095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.982290][T17095] Cannot create hsr debugfs directory [ 432.995826][T17117] chnl_net:caif_netlink_parms(): no params data found [ 433.113836][T17238] netlink: 'syz.2.3323': attribute type 1 has an invalid length. [ 433.128456][T17238] netlink: 'syz.2.3323': attribute type 11 has an invalid length. [ 433.145324][T17238] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3323'. [ 433.178600][T17247] netlink: 'syz.3.3327': attribute type 1 has an invalid length. [ 433.191969][T17247] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3327'. [ 433.211626][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 433.245511][T17249] netlink: 'syz.3.3327': attribute type 1 has an invalid length. [ 433.284998][T17249] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3327'. [ 433.312519][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 433.435999][T17262] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3328'. [ 433.491123][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.498547][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.517273][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3330'. [ 433.519558][T17117] bridge_slave_0: entered allmulticast mode [ 433.544597][T17117] bridge_slave_0: entered promiscuous mode [ 433.607312][T17269] bridge0: port 1(batadv0) entered blocking state [ 433.629648][ T5857] Bluetooth: hci1: command tx timeout [ 433.635556][T17269] bridge0: port 1(batadv0) entered disabled state [ 433.642797][T17269] batadv0: entered allmulticast mode [ 433.650464][T17269] batadv0: entered promiscuous mode [ 433.696554][T17117] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.704183][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.713170][T17117] bridge_slave_1: entered allmulticast mode [ 433.729069][T17117] bridge_slave_1: entered promiscuous mode [ 433.920759][T17117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.956254][T17117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.062753][T17095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.088338][T16115] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 434.097926][T16115] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 434.132618][T17289] nftables ruleset with unbound chain [ 434.143310][T17117] team0: Port device team_slave_0 added [ 434.155768][T17117] team0: Port device team_slave_1 added [ 434.182405][T17095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.293044][T17117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.311845][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.348667][T17117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.403894][T17095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.431843][T17300] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 434.435072][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.452721][T17301] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 434.463655][T17117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.494840][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.547025][T17117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.589872][ T5857] Bluetooth: hci3: command tx timeout [ 434.653427][T17095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.687151][T17311] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 434.972310][T17117] hsr_slave_0: entered promiscuous mode [ 434.980505][T17117] hsr_slave_1: entered promiscuous mode [ 434.986998][T17117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.002605][T17117] Cannot create hsr debugfs directory [ 435.069621][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.415320][T17095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 435.518046][T17095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 435.551440][T17095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.574482][T17095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.715509][ T5857] Bluetooth: hci1: command tx timeout [ 435.763002][T17359] netlink: 'syz.2.3356': attribute type 4 has an invalid length. [ 435.888081][T17366] netlink: 'syz.3.3358': attribute type 21 has an invalid length. [ 435.919334][T17366] netlink: 'syz.3.3358': attribute type 1 has an invalid length. [ 436.005334][T17095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.122141][T17095] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.150597][T16128] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.157797][T16128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.244688][T17380] 0ªX¹¦D: renamed from gretap0 [ 436.266394][T17380] 0ªX¹¦D: left promiscuous mode [ 436.276048][T17380] 0ªX¹¦D: entered allmulticast mode [ 436.288310][T17380] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 436.326636][T16128] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.333885][T16128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.372935][T17117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.420369][T17117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.495959][T17117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.507494][T17117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.681295][ T5840] Bluetooth: hci3: command tx timeout [ 436.833775][T17117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.900292][T17117] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.940246][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.947474][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.977679][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.984986][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.052238][T17410] openvswitch: netlink: IP tunnel dst address not specified [ 437.197263][T17095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.348509][T17095] veth0_vlan: entered promiscuous mode [ 437.400168][T17417] __nla_validate_parse: 9 callbacks suppressed [ 437.400190][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3370'. [ 437.420718][T17422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3372'. [ 437.428236][T17095] veth1_vlan: entered promiscuous mode [ 437.496587][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3370'. [ 437.612567][T17095] veth0_macvtap: entered promiscuous mode [ 437.634223][T17095] veth1_macvtap: entered promiscuous mode [ 437.687714][T17095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.771783][T17095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.830212][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3375'. [ 437.848782][T17117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.906114][T17095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.923732][T17095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.950348][T17095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.952342][T17439] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3378'. [ 437.959113][T17095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.993653][T17440] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3377'. [ 438.071005][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3377'. [ 438.295813][T17117] veth0_vlan: entered promiscuous mode [ 438.454043][T17117] veth1_vlan: entered promiscuous mode [ 438.637869][T17117] veth0_macvtap: entered promiscuous mode [ 438.665134][T17117] veth1_macvtap: entered promiscuous mode [ 438.677112][ T7019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.695996][ T7019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.712358][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3383'. [ 438.791458][T17117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.824968][T16115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.837234][T16115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.866503][T17117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.934514][T17117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.951467][T17117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.961689][T17117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.971239][T17117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.211206][T17469] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3388'. [ 439.299454][T17465] xt_CT: No such helper "syz0" [ 439.311264][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3389'. [ 439.343673][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.379382][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.511705][T16132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.563714][T16132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.838734][T17498] netlink: 'syz.2.3395': attribute type 21 has an invalid length. [ 439.861062][T17498] netlink: 'syz.2.3395': attribute type 4 has an invalid length. [ 439.869111][T17498] netlink: 'syz.2.3395': attribute type 5 has an invalid length. [ 440.006931][T17507] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 440.145520][T17507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.167704][T17509] ip6erspan0: entered promiscuous mode [ 440.209029][T17509] bond2: (slave ip6erspan0): making interface the new active one [ 440.219256][T17509] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 440.374265][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.481451][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.752879][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.868855][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.135839][T17525] Bluetooth: MGMT ver 1.23 [ 441.409602][ T13] bridge_slave_1: left allmulticast mode [ 441.419413][ T13] bridge_slave_1: left promiscuous mode [ 441.425266][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.515774][ T13] bridge_slave_0: left allmulticast mode [ 441.527691][ T13] bridge_slave_0: left promiscuous mode [ 441.548472][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.730430][T17563] netlink: 'syz.2.3410': attribute type 4 has an invalid length. [ 441.953003][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.966883][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.976206][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.984761][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.994243][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 442.287489][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.299381][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.311573][ T13] bond0 (unregistering): Released all slaves [ 442.362048][T17570] syzkaller1: entered promiscuous mode [ 442.367615][T17570] syzkaller1: entered allmulticast mode [ 442.424394][T17575] lo speed is unknown, defaulting to 1000 [ 442.887986][T17592] __nla_validate_parse: 8 callbacks suppressed [ 442.888011][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3419'. [ 443.046793][T17599] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3420'. [ 443.623545][ T13] hsr_slave_0: left promiscuous mode [ 443.647756][ T13] hsr_slave_1: left promiscuous mode [ 443.663217][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.683758][T17622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3425'. [ 443.694787][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.699365][T17622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3425'. [ 443.715350][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.724629][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.725598][T17622] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.764458][ T13] veth1_macvtap: left promiscuous mode [ 443.770399][ T13] veth0_macvtap: left promiscuous mode [ 443.776070][ T13] veth1_vlan: left promiscuous mode [ 443.782130][ T13] veth0_vlan: left promiscuous mode [ 444.041188][ T5840] Bluetooth: hci3: command tx timeout [ 444.397712][ T13] team0 (unregistering): Port device team_slave_1 removed [ 444.445079][ T13] team0 (unregistering): Port device team_slave_0 removed [ 445.257279][T17575] chnl_net:caif_netlink_parms(): no params data found [ 445.555512][T17575] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.573100][T17575] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.585822][T17575] bridge_slave_0: entered allmulticast mode [ 445.605476][T17575] bridge_slave_0: entered promiscuous mode [ 445.670116][T17654] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 445.710695][T17575] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.736619][T17575] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.765241][T17575] bridge_slave_1: entered allmulticast mode [ 445.782374][T17575] bridge_slave_1: entered promiscuous mode [ 445.996993][T17575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.057774][T17575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.111205][ T5840] Bluetooth: hci3: command tx timeout [ 446.153069][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3442'. [ 446.259371][T17575] team0: Port device team_slave_0 added [ 446.291732][T17575] team0: Port device team_slave_1 added [ 446.402115][T17685] tipc: Invalid UDP bearer configuration [ 446.402173][T17685] tipc: Enabling of bearer rejected, failed to enable media [ 446.428658][T17575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.437197][T17689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3446'. [ 446.460652][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.503037][T17575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.546358][T17575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.556382][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.579678][T17697] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3448'. [ 446.594515][T17575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.830857][T17712] netlink: 'syz.0.3451': attribute type 1 has an invalid length. [ 446.838867][T17712] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3451'. [ 446.843186][T17575] hsr_slave_0: entered promiscuous mode [ 446.886003][T17575] hsr_slave_1: entered promiscuous mode [ 446.895780][T17575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.911915][T17575] Cannot create hsr debugfs directory [ 447.007483][T17722] netlink: 'syz.3.3455': attribute type 2 has an invalid length. [ 447.025303][T17722] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3455'. [ 447.314387][T17735] xfrm1: entered allmulticast mode [ 447.608167][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 447.998387][T17771] netlink: 'syz.3.3469': attribute type 10 has an invalid length. [ 448.014411][T17771] __nla_validate_parse: 1 callbacks suppressed [ 448.014431][T17771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3469'. [ 448.096144][T17771] team0: Port device geneve0 added [ 448.193549][ T5840] Bluetooth: hci3: command tx timeout [ 448.284703][T17778] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 448.331931][T17575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.366766][T17575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.446456][T17575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.520192][T17575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.598852][T17798] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3477'. [ 448.631036][T17802] netlink: 'syz.0.3478': attribute type 64 has an invalid length. [ 448.654761][T17802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3478'. [ 448.686326][T17798] x_tables: duplicate underflow at hook 3 [ 448.690017][T17790] lo speed is unknown, defaulting to 1000 [ 448.882874][T17575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.990555][T17807] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.033768][T17807] bond0: (slave bond6): Enslaving as an active interface with an up link [ 449.096213][T17813] bond0: (slave bond6): Error -95 calling ndo_bpf [ 449.114325][T17813] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 449.231704][T17575] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.321942][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.329249][ T7019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.420736][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3485'. [ 449.421838][T16133] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.431849][T17829] netlink: 'syz.2.3485': attribute type 8 has an invalid length. [ 449.436954][T16133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.446892][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 449.533080][T17829] bridge0: entered allmulticast mode [ 449.617248][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 449.631218][T17837] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 449.638887][T17837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.675926][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 449.728982][T17835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.279261][ T5840] Bluetooth: hci3: command tx timeout [ 450.389121][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3496'. [ 450.537674][T17868] team1: entered promiscuous mode [ 450.558577][T17868] team1: entered allmulticast mode [ 450.618532][T17575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.796135][T17883] syzkaller1: entered promiscuous mode [ 450.809368][T17883] syzkaller1: entered allmulticast mode [ 450.863159][ T6663] IPVS: starting estimator thread 0... [ 450.949631][T17889] IPVS: using max 28 ests per chain, 67200 per kthread [ 450.961333][T17575] veth0_vlan: entered promiscuous mode [ 451.028615][T17575] veth1_vlan: entered promiscuous mode [ 451.123179][T17575] veth0_macvtap: entered promiscuous mode [ 451.143682][T17575] veth1_macvtap: entered promiscuous mode [ 451.160149][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3503'. [ 451.232565][T17575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.273147][T17575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.329011][T17575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.348651][T17575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.369442][T17575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.378220][T17575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.448141][T17904] lo speed is unknown, defaulting to 1000 [ 451.784061][T16132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.817112][T16132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.904565][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.944804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.134190][T17931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3512'. [ 452.198970][T17936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 452.391386][T17949] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 452.686982][T17949] lo speed is unknown, defaulting to 1000 [ 453.256589][T17952] xt_bpf: check failed: parse error [ 453.313310][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.324426][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3517'. [ 453.343916][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3517'. [ 453.406536][T17972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3517'. [ 453.512057][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.547969][T17965] lo speed is unknown, defaulting to 1000 [ 453.636286][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.746872][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.110499][T17978] netlink: 'syz.2.3523': attribute type 3 has an invalid length. [ 454.201436][ T67] bridge_slave_1: left allmulticast mode [ 454.207160][ T67] bridge_slave_1: left promiscuous mode [ 454.236220][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.261599][T17981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3525'. [ 454.295180][ T67] bridge_slave_0: left allmulticast mode [ 454.302960][ T67] bridge_slave_0: left promiscuous mode [ 454.308822][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.341281][T17984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3525'. [ 454.396736][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 454.706323][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.721402][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.739579][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.750142][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.758084][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.000495][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.013954][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.028167][ T67] bond0 (unregistering): Released all slaves [ 455.352159][T17994] lo speed is unknown, defaulting to 1000 [ 455.957790][T18016] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3536'. [ 455.994163][T18016] batman_adv: batadv0: Adding interface: dummy0 [ 456.014972][T18016] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.077305][T18016] batman_adv: batadv0: Interface activated: dummy0 [ 456.164742][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3538'. [ 456.203629][T18026] nbd: nbd0 already in use [ 456.400706][T18031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3540'. [ 456.792854][T18047] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 456.833629][ T5857] Bluetooth: hci3: command tx timeout [ 457.019658][ T67] hsr_slave_0: left promiscuous mode [ 457.040750][T18064] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3547'. [ 457.061745][ T67] hsr_slave_1: left promiscuous mode [ 457.071654][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.080223][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.096849][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.107138][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.160113][ T67] veth1_macvtap: left promiscuous mode [ 457.165751][ T67] veth0_macvtap: left promiscuous mode [ 457.171721][ T67] veth1_vlan: left promiscuous mode [ 457.177032][ T67] veth0_vlan: left promiscuous mode [ 457.726141][ T67] team0 (unregistering): Port device team_slave_1 removed [ 457.777008][ T67] team0 (unregistering): Port device team_slave_0 removed [ 458.233178][T18061] ip6gre1: entered allmulticast mode [ 458.292557][T18068] sit1: entered promiscuous mode [ 458.297582][T18068] sit1: entered allmulticast mode [ 458.413547][T18078] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 458.484081][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3554'. [ 458.625701][T17994] chnl_net:caif_netlink_parms(): no params data found [ 458.844580][T18090] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 458.911255][ T5857] Bluetooth: hci3: command tx timeout [ 459.071966][T18111] netlink: 'syz.5.3563': attribute type 1 has an invalid length. [ 459.074916][T17994] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.096272][T17994] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.107161][T17994] bridge_slave_0: entered allmulticast mode [ 459.118382][T17994] bridge_slave_0: entered promiscuous mode [ 459.135502][T17994] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.143397][T17994] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.150980][T17994] bridge_slave_1: entered allmulticast mode [ 459.159053][T17994] bridge_slave_1: entered promiscuous mode [ 459.448389][T17994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.469477][T18129] can: request_module (can-proto-0) failed. [ 459.476916][T17994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.486428][T18124] netlink: 1036 bytes leftover after parsing attributes in process `syz.5.3566'. [ 459.496486][T18124] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 459.618934][T17994] team0: Port device team_slave_0 added [ 459.659754][T17994] team0: Port device team_slave_1 added [ 459.737946][T17994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.745700][T17994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.775569][T17994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.798713][T17994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.805921][T17994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.833963][T17994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.002948][T17994] hsr_slave_0: entered promiscuous mode [ 460.013208][T17994] hsr_slave_1: entered promiscuous mode [ 460.020471][T17994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.029089][T17994] Cannot create hsr debugfs directory [ 460.328198][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3577'. [ 460.381573][T18157] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.3578'. [ 460.514521][T18161] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3580'. [ 460.524255][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3580'. [ 460.534489][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3580'. [ 460.545518][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3580'. [ 460.882077][T18173] FAULT_INJECTION: forcing a failure. [ 460.882077][T18173] name failslab, interval 1, probability 0, space 0, times 0 [ 460.949604][T18173] CPU: 0 UID: 0 PID: 18173 Comm: syz.0.3584 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 460.949635][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.949652][T18173] Call Trace: [ 460.949660][T18173] [ 460.949670][T18173] dump_stack_lvl+0x189/0x250 [ 460.949705][T18173] ? __pfx____ratelimit+0x10/0x10 [ 460.949736][T18173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.949767][T18173] ? __pfx__printk+0x10/0x10 [ 460.949795][T18173] ? __pfx___might_resched+0x10/0x10 [ 460.949831][T18173] should_fail_ex+0x414/0x560 [ 460.949862][T18173] should_failslab+0xa8/0x100 [ 460.949886][T18173] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.949907][T18173] ? __alloc_skb+0x112/0x2d0 [ 460.949928][T18173] ? __pfx___mutex_trylock_common+0x10/0x10 [ 460.949954][T18173] __alloc_skb+0x112/0x2d0 [ 460.949982][T18173] netlink_dump+0x22b/0xe20 [ 460.950008][T18173] ? __netlink_lookup+0xbd/0x810 [ 460.950041][T18173] ? __pfx_netlink_dump+0x10/0x10 [ 460.950077][T18173] ? netlink_lookup+0x30/0x200 [ 460.950097][T18173] ? netlink_lookup+0x30/0x200 [ 460.950115][T18173] ? netlink_lookup+0x30/0x200 [ 460.950143][T18173] __netlink_dump_start+0x5cb/0x7e0 [ 460.950173][T18173] cttimeout_get_timeout+0x164/0x400 [ 460.950215][T18173] ? __pfx_cttimeout_get_timeout+0x10/0x10 [ 460.950243][T18173] ? __pfx_ctnl_timeout_dump+0x10/0x10 [ 460.950289][T18173] nfnetlink_rcv_msg+0xb4a/0x1130 [ 460.950320][T18173] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 460.950369][T18173] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 460.950395][T18173] ? kasan_save_free_info+0x46/0x50 [ 460.950471][T18173] netlink_rcv_skb+0x208/0x470 [ 460.950496][T18173] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 460.950528][T18173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.950562][T18173] ? bpf_lsm_capable+0x9/0x20 [ 460.950580][T18173] ? security_capable+0x7e/0x2e0 [ 460.950619][T18173] nfnetlink_rcv+0x26a/0x2520 [ 460.950654][T18173] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 460.950687][T18173] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 460.950721][T18173] ? __dev_queue_xmit+0x27e/0x3a70 [ 460.950747][T18173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.950776][T18173] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 460.950804][T18173] ? __pfx___dev_queue_xmit+0x10/0x10 [ 460.950846][T18173] ? ref_tracker_free+0x63a/0x7d0 [ 460.950887][T18173] ? __copy_skb_header+0xa7/0x550 [ 460.950916][T18173] ? __pfx_ref_tracker_free+0x10/0x10 [ 460.950961][T18173] ? skb_clone+0x246/0x3a0 [ 460.950993][T18173] ? __netlink_deliver_tap+0x807/0x850 [ 460.951018][T18173] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.951049][T18173] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.951073][T18173] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.951103][T18173] netlink_unicast+0x75b/0x8d0 [ 460.951136][T18173] netlink_sendmsg+0x805/0xb30 [ 460.951170][T18173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.951203][T18173] ? aa_sock_msg_perm+0x94/0x160 [ 460.951232][T18173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.951257][T18173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.951282][T18173] __sock_sendmsg+0x219/0x270 [ 460.951316][T18173] ____sys_sendmsg+0x505/0x830 [ 460.951348][T18173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.951385][T18173] ? import_iovec+0x74/0xa0 [ 460.951409][T18173] ___sys_sendmsg+0x21f/0x2a0 [ 460.951439][T18173] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.951505][T18173] ? __fget_files+0x2a/0x420 [ 460.951526][T18173] ? __fget_files+0x3a0/0x420 [ 460.951562][T18173] __x64_sys_sendmsg+0x19b/0x260 [ 460.951591][T18173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.951630][T18173] ? __pfx_ksys_write+0x10/0x10 [ 460.951646][T18173] ? rcu_is_watching+0x15/0xb0 [ 460.951683][T18173] ? do_syscall_64+0xbe/0x3b0 [ 460.951707][T18173] do_syscall_64+0xfa/0x3b0 [ 460.951724][T18173] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.951753][T18173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.951773][T18173] ? clear_bhb_loop+0x60/0xb0 [ 460.951798][T18173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.951831][T18173] RIP: 0033:0x7f680338e929 [ 460.951851][T18173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.951870][T18173] RSP: 002b:00007f68011f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.951892][T18173] RAX: ffffffffffffffda RBX: 00007f68035b5fa0 RCX: 00007f680338e929 [ 460.951907][T18173] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 460.951921][T18173] RBP: 00007f68011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.951933][T18173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.951946][T18173] R13: 0000000000000000 R14: 00007f68035b5fa0 R15: 00007ffd668f9688 [ 460.951980][T18173] [ 461.417437][T16133] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 461.457753][T17994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.458209][ T5857] Bluetooth: hci3: command tx timeout [ 461.474722][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3588'. [ 461.480236][T18179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3588'. [ 461.521669][T17994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.577678][T17994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.607235][T17994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.853209][T17994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.932982][T17994] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.991330][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.998597][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.032918][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.040190][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.554784][T17994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.644296][T18239] syz.5.3605 (18239) used obsolete PPPIOCDETACH ioctl [ 462.655026][T18239] netlink: 'syz.5.3605': attribute type 9 has an invalid length. [ 462.697160][T17994] veth0_vlan: entered promiscuous mode [ 462.734130][T17994] veth1_vlan: entered promiscuous mode [ 462.787829][T18241] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 462.858166][T18247] netlink: 'syz.5.3608': attribute type 1 has an invalid length. [ 462.873311][T18246] netlink: 'syz.3.3607': attribute type 29 has an invalid length. [ 462.957447][T18247] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.108197][T17994] veth0_macvtap: entered promiscuous mode [ 463.139660][T17994] veth1_macvtap: entered promiscuous mode [ 463.191016][T17994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.250697][T17994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.278121][T17994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.307789][T17994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.359557][T17994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.379353][T17994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.550175][ T5857] Bluetooth: hci3: command 0x0419 tx timeout [ 463.594174][T18283] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 463.677443][T18283] bond6: entered promiscuous mode [ 463.683340][T18283] bond6: entered allmulticast mode [ 463.689111][T18283] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.828564][T16118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.887141][T16118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.974418][T18299] __nla_validate_parse: 8 callbacks suppressed [ 463.974438][T18299] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3625'. [ 463.980812][T16118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.980841][T16118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.027737][T18299] unsupported nlmsg_type 40 [ 464.599579][T18329] netlink: 'syz.2.3632': attribute type 5 has an invalid length. [ 465.089919][T18345] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.292475][T16117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.501396][T16117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.678891][T16117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.803680][T16117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.980126][T16117] bridge_slave_1: left allmulticast mode [ 465.985853][T16117] bridge_slave_1: left promiscuous mode [ 465.991907][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.002161][T16117] bridge_slave_0: left allmulticast mode [ 466.007875][T16117] bridge_slave_0: left promiscuous mode [ 466.014526][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.431204][T16118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.553235][T18359] netlink: 'syz.2.3642': attribute type 11 has an invalid length. [ 466.814978][T16117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.858372][T16117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.875812][T16117] bond0 (unregistering): Released all slaves [ 466.929746][T18366] tipc: Enabled bearer , priority 10 [ 466.966136][T18369] netlink: 'syz.5.3645': attribute type 1 has an invalid length. [ 467.231809][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.243134][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.252272][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.265830][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.268080][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'. [ 467.284730][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.513594][T18378] lo speed is unknown, defaulting to 1000 [ 467.693093][T18392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3650'. [ 467.751125][T18392] syzkaller1: entered promiscuous mode [ 467.764611][T18392] syzkaller1: entered allmulticast mode [ 467.785397][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'. [ 468.088626][T18400] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 468.117987][T18400] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3652'. [ 468.151225][T18400] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 468.236523][T18403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 468.819715][T16117] hsr_slave_0: left promiscuous mode [ 468.840732][T16117] hsr_slave_1: left promiscuous mode [ 468.847003][T16117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.865253][T16117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.884065][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 468.903569][T18429] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3656'. [ 468.914085][T16117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.929482][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 468.938760][T16117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.010961][T16117] veth1_macvtap: left promiscuous mode [ 469.030507][T16117] veth0_macvtap: left promiscuous mode [ 469.043133][T16117] veth1_vlan: left promiscuous mode [ 469.055284][T16117] veth0_vlan: left promiscuous mode [ 469.079280][T16116] wlan1: Trigger new scan to find an IBSS to join [ 469.308294][T18439] IPVS: length: 32 != 8 [ 469.404285][ T5840] Bluetooth: hci3: command tx timeout [ 470.076995][T18444] No such timeout policy "syz0" [ 470.210452][T16117] team0 (unregistering): Port device team_slave_1 removed [ 470.273520][T16117] team0 (unregistering): Port device team_slave_0 removed [ 471.190538][T18378] chnl_net:caif_netlink_parms(): no params data found [ 471.312006][T18453] netlink: 'syz.0.3663': attribute type 1 has an invalid length. [ 471.324478][T18453] netlink: 'syz.0.3663': attribute type 3 has an invalid length. [ 471.333713][T18453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3663'. [ 471.383764][T18451] netlink: 'syz.2.3661': attribute type 13 has an invalid length. [ 471.481871][ T5840] Bluetooth: hci3: command tx timeout [ 471.586310][ T30] audit: type=1804 audit(1750941458.615:7): pid=18465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3666" name="/newroot/62/cgroup.controllers" dev="tmpfs" ino=331 res=1 errno=0 [ 471.629418][ T30] audit: type=1800 audit(1750941458.615:8): pid=18465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3666" name="cgroup.controllers" dev="tmpfs" ino=331 res=0 errno=0 [ 471.708417][T18378] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.709887][T18470] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3667'. [ 471.735726][T18378] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.748427][T18470] netlink: 'syz.5.3667': attribute type 9 has an invalid length. [ 471.761355][T18378] bridge_slave_0: entered allmulticast mode [ 471.785983][T18378] bridge_slave_0: entered promiscuous mode [ 471.834473][T18378] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.859954][T18378] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.876915][T18378] bridge_slave_1: entered allmulticast mode [ 471.931332][T18378] bridge_slave_1: entered promiscuous mode [ 472.039477][ T13] wlan1: Trigger new scan to find an IBSS to join [ 472.116447][T18378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.183260][T18378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.215398][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3674'. [ 472.372535][T18378] team0: Port device team_slave_0 added [ 472.418879][T18378] team0: Port device team_slave_1 added [ 472.533776][T18378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.545723][T18378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.639350][T18378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.682381][T18378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.698632][T18378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.736273][T18378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.016539][T18378] hsr_slave_0: entered promiscuous mode [ 473.030066][T16126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.055312][T18378] hsr_slave_1: entered promiscuous mode [ 473.086603][T18378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.137134][T18378] Cannot create hsr debugfs directory [ 473.549314][ T5857] Bluetooth: hci3: command tx timeout [ 473.595971][T18534] netlink: 'syz.3.3687': attribute type 4 has an invalid length. [ 473.633404][T18536] netlink: 'syz.2.3689': attribute type 4 has an invalid length. [ 473.633843][T18534] netlink: 'syz.3.3687': attribute type 4 has an invalid length. [ 473.890737][T18543] netlink: 'syz.2.3692': attribute type 64 has an invalid length. [ 473.898656][T18543] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3692'. [ 473.927451][T18547] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3693'. [ 474.151498][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3696'. [ 474.217323][T18558] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3696'. [ 474.239868][T18557] veth7: entered allmulticast mode [ 474.306406][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 474.431868][T18567] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3699'. [ 474.564762][T18378] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.616523][T18378] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.672427][T18378] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.720353][T18378] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.860876][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3704'. [ 474.892043][T18578] netlink: 'syz.2.3704': attribute type 18 has an invalid length. [ 475.629986][ T5857] Bluetooth: hci3: command 0x0419 tx timeout [ 477.713104][ T5840] Bluetooth: hci3: command 0x0419 tx timeout [ 478.144654][T18378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.246807][T18378] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.311892][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.319217][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.340463][T18614] __nla_validate_parse: 2 callbacks suppressed [ 478.340484][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'. [ 478.365363][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.372636][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.402161][T18618] netlink: 'syz.3.3714': attribute type 62 has an invalid length. [ 478.944093][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 478.958198][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 479.049016][T18643] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.058411][T18643] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.067323][T18643] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.077195][T18643] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.122256][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 479.149789][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 479.187845][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 479.193344][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3727'. [ 479.219304][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 479.248952][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 479.276319][T18378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.283531][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 479.408370][T18378] veth0_vlan: entered promiscuous mode [ 479.438725][T18378] veth1_vlan: entered promiscuous mode [ 479.600601][T18378] veth0_macvtap: entered promiscuous mode [ 479.614732][T18378] veth1_macvtap: entered promiscuous mode [ 479.683605][T18378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.725833][T18378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.774317][T18378] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.800924][T18378] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.810034][T18672] netlink: 'syz.0.3734': attribute type 16 has an invalid length. [ 479.817894][T18672] netlink: 'syz.0.3734': attribute type 17 has an invalid length. [ 479.825870][T18378] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.838087][T18378] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.278562][T16133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.300616][T16133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.374274][T16133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.398599][T16133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.156439][T16113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.272725][T16113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.674059][T16113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.906243][T16113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.034811][T16113] bridge_slave_1: left allmulticast mode [ 482.040705][T16113] bridge_slave_1: left promiscuous mode [ 482.046818][T16113] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.057244][T16113] bridge_slave_0: left allmulticast mode [ 482.063496][T16113] bridge_slave_0: left promiscuous mode [ 482.069342][T16113] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.281825][T18733] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 482.655953][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.667707][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 482.676621][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 482.685647][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.707598][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.836420][T16113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.848080][T16113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.860156][T16113] bond0 (unregistering): Released all slaves [ 482.894922][T18735] lo speed is unknown, defaulting to 1000 [ 482.918859][T18735] lo speed is unknown, defaulting to 1000 [ 482.991852][T18752] lo speed is unknown, defaulting to 1000 [ 482.997158][T18735] lo speed is unknown, defaulting to 1000 [ 483.260123][T18761] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 483.415861][T18766] __nla_validate_parse: 69 callbacks suppressed [ 483.415883][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'. [ 483.457871][T18735] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 483.691630][T18735] lo speed is unknown, defaulting to 1000 [ 483.712493][T18735] lo speed is unknown, defaulting to 1000 [ 483.730274][T18778] sock: sock_set_timeout: `syz.3.3764' (pid 18778) tries to set negative timeout [ 483.778540][T18781] FAULT_INJECTION: forcing a failure. [ 483.778540][T18781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.802231][T18781] CPU: 1 UID: 0 PID: 18781 Comm: syz.2.3766 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 483.802262][T18781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.802275][T18781] Call Trace: [ 483.802283][T18781] [ 483.802292][T18781] dump_stack_lvl+0x189/0x250 [ 483.802330][T18781] ? __pfx____ratelimit+0x10/0x10 [ 483.802362][T18781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.802393][T18781] ? __pfx__printk+0x10/0x10 [ 483.802416][T18781] ? __might_fault+0xb0/0x130 [ 483.802448][T18781] should_fail_ex+0x414/0x560 [ 483.802479][T18781] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 483.802504][T18781] ? __kasan_slab_free+0x62/0x70 [ 483.802525][T18781] ? arch_do_signal_or_restart+0x9a/0x750 [ 483.802550][T18781] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 483.802582][T18781] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 483.802637][T18781] ? fpu__alloc_mathframe+0xad/0x130 [ 483.802679][T18781] get_sigframe+0x58d/0x7d0 [ 483.802712][T18781] ? __pfx_get_sigframe+0x10/0x10 [ 483.802735][T18781] ? kmem_cache_free+0x18f/0x400 [ 483.802768][T18781] x64_setup_rt_frame+0x15b/0xd40 [ 483.802802][T18781] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.802833][T18781] ? _raw_spin_unlock_irq+0x2e/0x50 [ 483.802860][T18781] ? get_signal+0x1151/0x1340 [ 483.802899][T18781] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 483.802941][T18781] arch_do_signal_or_restart+0x3d7/0x750 [ 483.802975][T18781] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 483.803046][T18781] ? exit_to_user_mode_loop+0x40/0x110 [ 483.803079][T18781] exit_to_user_mode_loop+0x75/0x110 [ 483.803109][T18781] do_syscall_64+0x2bd/0x3b0 [ 483.803127][T18781] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.803156][T18781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.803176][T18781] ? clear_bhb_loop+0x60/0xb0 [ 483.803201][T18781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.803220][T18781] RIP: 0033:0x7fe90918e929 [ 483.803238][T18781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.803255][T18781] RSP: 002b:00007fe906ff6038 EFLAGS: 00000246 [ 483.803274][T18781] RAX: ffffffffffffff9b RBX: 00007fe9093b5fa0 RCX: 00007fe90918e929 [ 483.803289][T18781] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000007 [ 483.803302][T18781] RBP: 00007fe906ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 483.803314][T18781] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000002 [ 483.803327][T18781] R13: 0000000000000000 R14: 00007fe9093b5fa0 R15: 00007ffdd95327d8 [ 483.803360][T18781] [ 484.071326][T18735] lo speed is unknown, defaulting to 1000 [ 484.079961][T18735] lo speed is unknown, defaulting to 1000 [ 484.087674][T18735] lo speed is unknown, defaulting to 1000 [ 484.143298][T18735] lo speed is unknown, defaulting to 1000 [ 484.149190][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3767'. [ 484.149216][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 484.167730][T18785] netlink: 'syz.2.3767': attribute type 15 has an invalid length. [ 484.214420][T18735] lo speed is unknown, defaulting to 1000 [ 484.222696][T18735] lo speed is unknown, defaulting to 1000 [ 484.268107][T18788] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3768'. [ 484.708715][T16113] hsr_slave_0: left promiscuous mode [ 484.736655][T16113] hsr_slave_1: left promiscuous mode [ 484.743577][T16113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.751673][ T5857] Bluetooth: hci3: command tx timeout [ 484.761184][T18809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3771'. [ 484.761428][T16113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.791118][T16113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.798601][T16113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.851970][T16113] veth1_macvtap: left promiscuous mode [ 484.866798][T16113] veth0_macvtap: left promiscuous mode [ 484.873450][T16113] veth1_vlan: left promiscuous mode [ 484.878858][T16113] veth0_vlan: left promiscuous mode [ 485.123641][T18821] FAULT_INJECTION: forcing a failure. [ 485.123641][T18821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.145742][T18821] CPU: 0 UID: 0 PID: 18821 Comm: syz.3.3777 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 485.145773][T18821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.145786][T18821] Call Trace: [ 485.145795][T18821] [ 485.145804][T18821] dump_stack_lvl+0x189/0x250 [ 485.145838][T18821] ? __pfx____ratelimit+0x10/0x10 [ 485.145865][T18821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.145895][T18821] ? __pfx__printk+0x10/0x10 [ 485.145916][T18821] ? __might_fault+0xb0/0x130 [ 485.145957][T18821] should_fail_ex+0x414/0x560 [ 485.145988][T18821] _copy_from_user+0x2d/0xb0 [ 485.146009][T18821] restore_altstack+0x9d/0x4b0 [ 485.146038][T18821] ? freezing_slow_path+0x10d/0x150 [ 485.146060][T18821] ? __pfx_restore_altstack+0x10/0x10 [ 485.146088][T18821] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.146116][T18821] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.146149][T18821] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 485.146183][T18821] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 485.146208][T18821] ? _raw_spin_unlock_irq+0x45/0x50 [ 485.146234][T18821] ? signal_setup_done+0x230/0x310 [ 485.146268][T18821] ? __lock_acquire+0xab9/0xd20 [ 485.146319][T18821] ? __task_pid_nr_ns+0x28/0x470 [ 485.146348][T18821] ? do_syscall_64+0xbe/0x3b0 [ 485.146371][T18821] do_syscall_64+0xfa/0x3b0 [ 485.146388][T18821] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.146418][T18821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.146437][T18821] ? clear_bhb_loop+0x60/0xb0 [ 485.146462][T18821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.146479][T18821] RIP: 0033:0x7f881e92ab19 [ 485.146495][T18821] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 485.146510][T18821] RSP: 002b:00007f881f769a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 485.146530][T18821] RAX: ffffffffffffffda RBX: 00007f881ebb5fa0 RCX: 00007f881e92ab19 [ 485.146543][T18821] RDX: 00007f881f769a80 RSI: 00007f881f769bb0 RDI: 0000000000000021 [ 485.146555][T18821] RBP: 00007f881f76a090 R08: 0000000000000000 R09: 0000000000000000 [ 485.146565][T18821] R10: 000000002c000011 R11: 0000000000000202 R12: 0000000000000002 [ 485.146576][T18821] R13: 0000000000000000 R14: 00007f881ebb5fa0 R15: 00007ffd4f5a8fc8 [ 485.146605][T18821] [ 485.505708][T18828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3780'. [ 485.847409][T16113] team0 (unregistering): Port device team_slave_1 removed [ 485.894729][T16113] team0 (unregistering): Port device team_slave_0 removed [ 486.357632][T18752] chnl_net:caif_netlink_parms(): no params data found [ 486.593123][T18832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.801259][T18851] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.821079][T18752] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.829638][ T5857] Bluetooth: hci3: command tx timeout [ 486.859497][T18752] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.870990][T18851] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.890722][T18752] bridge_slave_0: entered allmulticast mode [ 486.921067][T18752] bridge_slave_0: entered promiscuous mode [ 487.001215][T18752] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.008420][T18752] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.067136][T18752] bridge_slave_1: entered allmulticast mode [ 487.068300][T18869] netlink: 'syz.3.3789': attribute type 25 has an invalid length. [ 487.128289][T18752] bridge_slave_1: entered promiscuous mode [ 487.148125][T18870] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 487.341533][T18752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.371223][T18752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.417986][T18881] netlink: 'syz.3.3792': attribute type 32 has an invalid length. [ 487.426029][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 487.540654][T18881] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 487.553308][T18886] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3794'. [ 487.647351][T18887] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3795'. [ 487.725721][T18752] team0: Port device team_slave_0 added [ 487.783833][T18752] team0: Port device team_slave_1 added [ 487.916829][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3801'. [ 487.988038][T18752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.010007][T18752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.047656][T18752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.104207][T18915] FAULT_INJECTION: forcing a failure. [ 488.104207][T18915] name failslab, interval 1, probability 0, space 0, times 0 [ 488.125161][T18752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.150289][T18752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.176904][T18915] CPU: 1 UID: 0 PID: 18915 Comm: syz.0.3803 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 488.176932][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.176944][T18915] Call Trace: [ 488.176953][T18915] [ 488.176961][T18915] dump_stack_lvl+0x189/0x250 [ 488.176999][T18915] ? __pfx____ratelimit+0x10/0x10 [ 488.177031][T18915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.177062][T18915] ? __pfx__printk+0x10/0x10 [ 488.177090][T18915] ? __pfx___might_resched+0x10/0x10 [ 488.177119][T18915] ? fs_reclaim_acquire+0x7d/0x100 [ 488.177148][T18915] should_fail_ex+0x414/0x560 [ 488.177180][T18915] should_failslab+0xa8/0x100 [ 488.177204][T18915] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 488.177226][T18915] ? __alloc_skb+0x112/0x2d0 [ 488.177253][T18915] __alloc_skb+0x112/0x2d0 [ 488.177282][T18915] tcp_stream_alloc_skb+0x3d/0x340 [ 488.177307][T18915] tcp_connect+0x1087/0x46f0 [ 488.177348][T18915] ? tcp_fastopen_defer_connect+0xf0/0x370 [ 488.177380][T18915] ? secure_tcp_ts_off+0xbd/0x180 [ 488.177410][T18915] ? sk_setup_caps+0x850/0xac0 [ 488.177444][T18915] tcp_v4_connect+0x10e7/0x19d0 [ 488.177488][T18915] ? __pfx_tcp_v4_connect+0x10/0x10 [ 488.177524][T18915] mptcp_connect+0x745/0xc10 [ 488.177562][T18915] __inet_stream_connect+0x295/0xf10 [ 488.177598][T18915] ? __pfx___inet_stream_connect+0x10/0x10 [ 488.177632][T18915] ? __kasan_kmalloc+0x93/0xb0 [ 488.177653][T18915] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 488.177673][T18915] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 488.177698][T18915] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 488.177725][T18915] mptcp_sendmsg_fastopen+0x17d/0x580 [ 488.177757][T18915] mptcp_sendmsg+0x176c/0x1970 [ 488.177776][T18915] ? __pfx___might_resched+0x10/0x10 [ 488.177807][T18915] ? __lock_acquire+0xab9/0xd20 [ 488.177865][T18915] ? aa_sk_perm+0x81e/0x950 [ 488.177896][T18915] ? __pfx_aa_sk_perm+0x10/0x10 [ 488.177919][T18915] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 488.177938][T18915] ? sock_rps_record_flow+0x19/0x410 [ 488.177961][T18915] ? inet_sendmsg+0x2f4/0x370 [ 488.177984][T18915] __sock_sendmsg+0x19c/0x270 [ 488.178036][T18915] ____sys_sendmsg+0x52d/0x830 [ 488.178069][T18915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.178119][T18915] ? import_iovec+0x74/0xa0 [ 488.178144][T18915] ___sys_sendmsg+0x21f/0x2a0 [ 488.178172][T18915] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.178239][T18915] ? __fget_files+0x2a/0x420 [ 488.178260][T18915] ? __fget_files+0x3a0/0x420 [ 488.178294][T18915] __sys_sendmmsg+0x227/0x430 [ 488.178326][T18915] ? __pfx___sys_sendmmsg+0x10/0x10 [ 488.178348][T18915] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 488.178398][T18915] ? ksys_write+0x22a/0x250 [ 488.178420][T18915] ? __pfx_ksys_write+0x10/0x10 [ 488.178435][T18915] ? rcu_is_watching+0x15/0xb0 [ 488.178474][T18915] __x64_sys_sendmmsg+0xa0/0xc0 [ 488.178501][T18915] do_syscall_64+0xfa/0x3b0 [ 488.178518][T18915] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.178547][T18915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.178566][T18915] ? clear_bhb_loop+0x60/0xb0 [ 488.178591][T18915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.178610][T18915] RIP: 0033:0x7f680338e929 [ 488.178637][T18915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.178654][T18915] RSP: 002b:00007f68011f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 488.178676][T18915] RAX: ffffffffffffffda RBX: 00007f68035b5fa0 RCX: 00007f680338e929 [ 488.178690][T18915] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000007 [ 488.178703][T18915] RBP: 00007f68011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 488.178715][T18915] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000002 [ 488.178727][T18915] R13: 0000000000000000 R14: 00007f68035b5fa0 R15: 00007ffd668f9688 [ 488.178758][T18915] [ 488.592159][T18752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.892955][T18938] __nla_validate_parse: 1 callbacks suppressed [ 488.892999][T18938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3809'. [ 488.909286][ T5857] Bluetooth: hci3: command tx timeout [ 489.037011][T18752] hsr_slave_0: entered promiscuous mode [ 489.061124][T18752] hsr_slave_1: entered promiscuous mode [ 489.068884][T18752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.078432][T18752] Cannot create hsr debugfs directory [ 489.175193][T18945] syzkaller1: left promiscuous mode [ 489.183975][T18945] syzkaller1: left allmulticast mode [ 489.238567][T18952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3815'. [ 489.248687][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3815'. [ 489.425542][T18960] FAULT_INJECTION: forcing a failure. [ 489.425542][T18960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.428028][T18952] lo speed is unknown, defaulting to 1000 [ 489.469623][T18960] CPU: 1 UID: 0 PID: 18960 Comm: syz.3.3817 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 489.469657][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.469669][T18960] Call Trace: [ 489.469677][T18960] [ 489.469687][T18960] dump_stack_lvl+0x189/0x250 [ 489.469723][T18960] ? __pfx____ratelimit+0x10/0x10 [ 489.469755][T18960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.469785][T18960] ? __pfx__printk+0x10/0x10 [ 489.469806][T18960] ? __might_fault+0xb0/0x130 [ 489.469839][T18960] should_fail_ex+0x414/0x560 [ 489.469870][T18960] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 489.469896][T18960] ? __kasan_slab_free+0x62/0x70 [ 489.469918][T18960] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 489.469950][T18960] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 489.470002][T18960] ? fpu__alloc_mathframe+0xad/0x130 [ 489.470031][T18960] get_sigframe+0x58d/0x7d0 [ 489.470063][T18960] ? __pfx_get_sigframe+0x10/0x10 [ 489.470105][T18960] ? kmem_cache_free+0x18f/0x400 [ 489.470139][T18960] x64_setup_rt_frame+0x15b/0xd40 [ 489.470172][T18960] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.470205][T18960] ? _raw_spin_unlock_irq+0x2e/0x50 [ 489.470240][T18960] ? get_signal+0x1151/0x1340 [ 489.470280][T18960] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 489.470317][T18960] arch_do_signal_or_restart+0x3d7/0x750 [ 489.470352][T18960] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 489.470397][T18960] ? exit_to_user_mode_loop+0x40/0x110 [ 489.470431][T18960] exit_to_user_mode_loop+0x75/0x110 [ 489.470460][T18960] do_syscall_64+0x2bd/0x3b0 [ 489.470478][T18960] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.470509][T18960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.470529][T18960] ? clear_bhb_loop+0x60/0xb0 [ 489.470553][T18960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.470572][T18960] RIP: 0033:0x7f881e98e927 [ 489.470592][T18960] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 489.470610][T18960] RSP: 002b:00007f881f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.470632][T18960] RAX: 0000000000000133 RBX: 00007f881ebb5fa0 RCX: 00007f881e98e929 [ 489.470646][T18960] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000007 [ 489.470658][T18960] RBP: 00007f881f76a090 R08: 0000000000000000 R09: 0000000000000000 [ 489.470669][T18960] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000002 [ 489.470682][T18960] R13: 0000000000000000 R14: 00007f881ebb5fa0 R15: 00007ffd4f5a8fc8 [ 489.470713][T18960] [ 489.603979][T16113] batman_adv: batadv2: IGMP Querier disappeared - multicast optimizations disabled [ 489.923872][T18971] netlink: 'syz.2.3821': attribute type 1 has an invalid length. [ 489.960620][T18971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3821'. [ 490.011659][T18970] ip6erspan1: entered promiscuous mode [ 490.315758][T18983] xt_nat: multiple ranges no longer supported [ 490.419507][T18952] lo speed is unknown, defaulting to 1000 [ 490.832097][T19002] vlan2: entered promiscuous mode [ 490.837220][T19002] bridge0: entered promiscuous mode [ 490.872192][T18752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 490.898070][T18752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 490.989574][ T5857] Bluetooth: hci3: command tx timeout [ 491.120350][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3831'. [ 491.137797][T18752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.162430][T18752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.255033][T19018] sock: sock_timestamping_bind_phc: sock not bind to device [ 491.466280][T18752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.551142][T18752] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.576328][T19031] netlink: 'syz.2.3835': attribute type 4 has an invalid length. [ 491.625287][T16133] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.632544][T16133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.686560][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.693826][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.811191][T18752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.871397][T18752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.946634][T19045] netlink: 'syz.5.3840': attribute type 1 has an invalid length. [ 491.956063][T19048] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3841'. [ 491.977387][T19048] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3841'. [ 492.016136][T19048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3841'. [ 492.141276][T19045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 492.180362][T19050] bond7: (slave veth9): Enslaving as an active interface with a down link [ 492.211488][T19057] vlan3: entered allmulticast mode [ 492.225359][T19057] veth1: entered allmulticast mode [ 492.232115][T19057] veth1: entered promiscuous mode [ 492.237920][T19057] veth1: left promiscuous mode [ 492.245870][T19057] bond7: (slave vlan3): making interface the new active one [ 492.254468][T19057] veth1: entered promiscuous mode [ 492.260566][T19057] vlan3: entered promiscuous mode [ 492.266463][T19057] bond7: (slave vlan3): Enslaving as an active interface with an up link [ 492.557262][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 492.588782][T19079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3851'. [ 492.723741][T18752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.751311][T19083] IPVS: Scheduler module ip_vs_sip not found [ 492.809887][T19087] Cannot find add_set index 4 as target [ 492.874018][T19090] nbd: socks must be embedded in a SOCK_ITEM attr [ 492.887147][T18752] veth0_vlan: entered promiscuous mode [ 492.961091][T19091] batman_adv: batadv0: Interface deactivated: dummy0 [ 492.967905][T19091] batman_adv: batadv0: Removing interface: dummy0 [ 493.018768][T19091] bridge_slave_0: left allmulticast mode [ 493.025121][T19091] bridge_slave_0: left promiscuous mode [ 493.041955][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.065673][T19091] bridge_slave_1: left allmulticast mode [ 493.083881][T19091] bridge_slave_1: left promiscuous mode [ 493.092853][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.108251][T19091] bond0: (slave bond_slave_0): Releasing backup interface [ 493.127817][T19091] bond0: (slave bond_slave_1): Releasing backup interface [ 493.164406][T19091] team0: Port device team_slave_0 removed [ 493.179667][T19107] netlink: 'syz.3.3859': attribute type 10 has an invalid length. [ 493.210629][T19091] team0: Port device team_slave_1 removed [ 493.217942][T19091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.228137][T19091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.238267][T19091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.246544][T19091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.311777][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 493.342164][T19107] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.370341][T19107] bridge_slave_1: left allmulticast mode [ 493.376178][T19107] bridge_slave_1: left promiscuous mode [ 493.384766][T19107] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.427591][T18752] veth1_vlan: entered promiscuous mode [ 493.478900][T19111] netlink: 'syz.5.3860': attribute type 10 has an invalid length. [ 493.497035][T18752] veth0_macvtap: entered promiscuous mode [ 493.511350][T19111] batadv0: entered promiscuous mode [ 493.517161][T19111] batadv0: entered allmulticast mode [ 493.523886][T19111] bridge0: port 4(batadv0) entered blocking state [ 493.542808][T19111] bridge0: port 4(batadv0) entered disabled state [ 493.562778][T19111] bridge0: port 4(batadv0) entered blocking state [ 493.569398][T19111] bridge0: port 4(batadv0) entered forwarding state [ 493.592984][T18752] veth1_macvtap: entered promiscuous mode [ 493.646301][T18752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.671460][T18752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.691624][T18752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.701105][T18752] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.710191][T18752] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.720205][T18752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.766654][T16120] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 493.776238][T16120] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 493.905968][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.914043][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.957778][T16117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.966037][T16117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.793117][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.011501][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.213418][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.258313][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.378404][ T67] bridge_slave_1: left allmulticast mode [ 495.384460][ T67] bridge_slave_1: left promiscuous mode [ 495.391033][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.402880][ T67] bridge_slave_0: left allmulticast mode [ 495.408641][ T67] bridge_slave_0: left promiscuous mode [ 495.414709][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.761392][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.774626][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.785965][ T67] bond0 (unregistering): Released all slaves [ 496.154720][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.163858][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.171820][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 496.184629][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 496.193127][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.261463][T19114] lo speed is unknown, defaulting to 1000 [ 496.352314][ T67] hsr_slave_0: left promiscuous mode [ 496.358407][ T67] hsr_slave_1: left promiscuous mode [ 496.364644][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.377573][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.386538][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.394103][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.421847][ T67] veth1_macvtap: left promiscuous mode [ 496.427471][ T67] veth0_macvtap: left promiscuous mode [ 496.433614][ T67] veth1_vlan: left promiscuous mode [ 496.438979][ T67] veth0_vlan: left promiscuous mode [ 497.008423][ T67] team0 (unregistering): Port device team_slave_1 removed [ 497.054274][ T67] team0 (unregistering): Port device team_slave_0 removed [ 497.513199][T19114] lo speed is unknown, defaulting to 1000 [ 497.730577][T19114] chnl_net:caif_netlink_parms(): no params data found [ 497.823670][T19114] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.831184][T19114] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.838406][T19114] bridge_slave_0: entered allmulticast mode [ 497.845856][T19114] bridge_slave_0: entered promiscuous mode [ 497.855331][T19114] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.863274][T19114] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.871842][T19114] bridge_slave_1: entered allmulticast mode [ 497.879459][T19114] bridge_slave_1: entered promiscuous mode [ 497.921034][T19114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.933734][T19114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.975289][T19114] team0: Port device team_slave_0 added [ 497.984603][T19114] team0: Port device team_slave_1 added [ 498.022084][T19114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.029082][T19114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.056004][T19114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.070171][T19114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.077164][T19114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.103776][T19114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.161479][T19114] hsr_slave_0: entered promiscuous mode [ 498.167969][T19114] hsr_slave_1: entered promiscuous mode [ 498.174866][T19114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.182719][T19114] Cannot create hsr debugfs directory [ 498.269622][ T5857] Bluetooth: hci3: command tx timeout [ 498.432303][T16113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 498.580369][T19114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.601459][T19114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.612225][T19114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.623836][T19114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.719593][T19114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.744334][T19114] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.757853][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.765067][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.784804][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.792024][T16113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.014279][T19114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.064433][T19114] veth0_vlan: entered promiscuous mode [ 499.087964][T19114] veth1_vlan: entered promiscuous mode [ 499.122596][T19114] veth0_macvtap: entered promiscuous mode [ 499.136486][T19114] veth1_macvtap: entered promiscuous mode [ 499.157355][T19114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.176330][T19114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.192209][T19114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.204032][T19114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.213372][T19114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.222517][T19114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.311552][T16117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.327908][T16117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.357942][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.368958][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.195486][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.599054][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 502.613817][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 502.633435][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.636547][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 502.655171][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 502.664167][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 502.724317][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.748448][T19133] lo speed is unknown, defaulting to 1000 [ 502.832349][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.966138][T19133] lo speed is unknown, defaulting to 1000 [ 503.036173][ T67] bridge_slave_1: left allmulticast mode [ 503.042411][ T67] bridge_slave_1: left promiscuous mode [ 503.048194][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.057699][ T67] bridge_slave_0: left allmulticast mode [ 503.063830][ T67] bridge_slave_0: left promiscuous mode [ 503.072384][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.467581][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.482427][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.496089][ T67] bond0 (unregistering): Released all slaves [ 503.698207][T19133] chnl_net:caif_netlink_parms(): no params data found [ 503.994712][T19133] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.011724][T19133] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.019073][T19133] bridge_slave_0: entered allmulticast mode [ 504.029009][T19133] bridge_slave_0: entered promiscuous mode [ 504.044468][ T67] hsr_slave_0: left promiscuous mode [ 504.050725][ T67] hsr_slave_1: left promiscuous mode [ 504.056667][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.066217][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.075109][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.083406][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.107945][ T67] veth1_macvtap: left promiscuous mode [ 504.114426][ T67] veth0_macvtap: left promiscuous mode [ 504.120293][ T67] veth1_vlan: left promiscuous mode [ 504.125702][ T67] veth0_vlan: left promiscuous mode [ 504.682390][ T67] team0 (unregistering): Port device team_slave_1 removed [ 504.730741][ T67] team0 (unregistering): Port device team_slave_0 removed [ 504.754552][ T5857] Bluetooth: hci3: command tx timeout [ 505.256182][T19133] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.263716][T19133] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.275253][T19133] bridge_slave_1: entered allmulticast mode [ 505.283415][T19133] bridge_slave_1: entered promiscuous mode [ 505.353146][T19133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.379877][T19133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.448386][T19133] team0: Port device team_slave_0 added [ 505.463324][T19133] team0: Port device team_slave_1 added [ 505.526366][T19133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.534152][T19133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.561190][T19133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.575381][ T13] vlan3: left promiscuous mode [ 505.584054][T19133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.592399][T19133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.619080][T19133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.683304][T19133] hsr_slave_0: entered promiscuous mode [ 505.691038][T19133] hsr_slave_1: entered promiscuous mode [ 505.698455][T19133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.707205][T19133] Cannot create hsr debugfs directory [ 506.140236][T19133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.153061][T19133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.163186][T19133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.176686][T19133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.273451][T19133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.302854][T19133] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.323225][T16133] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.330398][T16133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.352768][T16133] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.360016][T16133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.579835][T19133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.638244][T19133] veth0_vlan: entered promiscuous mode [ 506.657198][T19133] veth1_vlan: entered promiscuous mode [ 506.695972][T19133] veth0_macvtap: entered promiscuous mode [ 506.708717][T19133] veth1_macvtap: entered promiscuous mode [ 506.734606][T19133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.753357][T19133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.767209][T19133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.777003][T19133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.787053][T19133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.796120][T19133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.829891][ T5857] Bluetooth: hci3: command tx timeout [ 506.888541][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.906443][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.937656][T16120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.947359][T16120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.693984][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.191588][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.226939][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 510.236553][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 510.246080][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 510.265275][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.282439][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.295844][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.331219][T19152] lo speed is unknown, defaulting to 1000 [ 510.418876][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.547419][T19152] lo speed is unknown, defaulting to 1000 [ 510.600885][ T67] bridge_slave_1: left allmulticast mode [ 510.606602][ T67] bridge_slave_1: left promiscuous mode [ 510.612399][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.623222][ T67] bridge_slave_0: left allmulticast mode [ 510.628931][ T67] bridge_slave_0: left promiscuous mode [ 510.635632][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.038806][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.052831][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.064655][ T67] bond0 (unregistering): Released all slaves [ 511.320212][T19152] chnl_net:caif_netlink_parms(): no params data found [ 511.573827][T19152] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.581475][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.588774][T19152] bridge_slave_0: entered allmulticast mode [ 511.598174][T19152] bridge_slave_0: entered promiscuous mode [ 511.609251][T19152] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.616547][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.624018][T19152] bridge_slave_1: entered allmulticast mode [ 511.633645][T19152] bridge_slave_1: entered promiscuous mode [ 511.664875][ T67] hsr_slave_0: left promiscuous mode [ 511.675658][ T67] hsr_slave_1: left promiscuous mode [ 511.682685][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.690527][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.698593][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.706959][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.731553][ T67] veth1_macvtap: left promiscuous mode [ 511.737127][ T67] veth0_macvtap: left promiscuous mode [ 511.743767][ T67] veth1_vlan: left promiscuous mode [ 511.749592][ T67] veth0_vlan: left promiscuous mode [ 512.357264][ T5840] Bluetooth: hci3: command tx timeout [ 512.380691][ T67] team0 (unregistering): Port device team_slave_1 removed [ 512.433465][ T67] team0 (unregistering): Port device team_slave_0 removed [ 513.021456][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.045376][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.122394][T19152] team0: Port device team_slave_0 added [ 513.134297][T19152] team0: Port device team_slave_1 added [ 513.191618][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.198655][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.226041][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.238482][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.245639][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.272240][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.334614][T19152] hsr_slave_0: entered promiscuous mode [ 513.342694][T19152] hsr_slave_1: entered promiscuous mode [ 513.348977][T19152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.356728][T19152] Cannot create hsr debugfs directory [ 513.800589][T19152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 513.811841][T19152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 513.823334][T19152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.834649][T19152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.933886][T19152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.971439][T19152] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.988139][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.995427][T16117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.017120][T16133] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.024419][T16133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.261669][T19152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.319938][T19152] veth0_vlan: entered promiscuous mode [ 514.333451][T19152] veth1_vlan: entered promiscuous mode [ 514.365420][T19152] veth0_macvtap: entered promiscuous mode [ 514.376018][T19152] veth1_macvtap: entered promiscuous mode [ 514.397039][T19152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.413304][T19152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.429550][ T5840] Bluetooth: hci3: command tx timeout [ 514.430339][T19152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.445279][T19152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.454437][T19152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.463779][T19152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.558657][T16133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.567365][T16133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.605022][T16117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.614864][T16117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.073499][T16119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.376317][T16119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.711213][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.721623][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.732690][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.743876][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.754484][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.806961][T16119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.844812][T19171] lo speed is unknown, defaulting to 1000 [ 517.906310][T16119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.043732][T16119] bridge_slave_1: left allmulticast mode [ 518.060115][T16119] bridge_slave_1: left promiscuous mode [ 518.067723][T16119] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.086611][T16119] bridge_slave_0: left allmulticast mode [ 518.093825][T16119] bridge_slave_0: left promiscuous mode [ 518.099784][T16119] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.683624][T19187] __nla_validate_parse: 2 callbacks suppressed [ 518.683648][T19187] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3863'. [ 518.884161][T16119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.897658][T16119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.914299][T16119] bond0 (unregistering): Released all slaves [ 518.928823][T19171] lo speed is unknown, defaulting to 1000 [ 518.973372][T19199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3868'. [ 518.984850][T19199] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3868'. [ 519.005552][T19199] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3868'. [ 519.315763][T19214] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3872'. [ 519.367312][T19215] netlink: 'syz.0.3872': attribute type 24 has an invalid length. [ 519.386876][T19213] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3872'. [ 519.496974][T19224] netlink: 'syz.3.3876': attribute type 4 has an invalid length. [ 519.544205][T19224] netlink: 'syz.3.3876': attribute type 4 has an invalid length. [ 519.790065][ T5840] Bluetooth: hci3: command tx timeout [ 519.791060][T19231] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3877'. [ 520.096252][T16119] hsr_slave_0: left promiscuous mode [ 520.120508][T16119] hsr_slave_1: left promiscuous mode [ 520.127236][T16119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.139315][T16119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.153104][T16119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.161540][T16119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.206608][T16119] veth1_macvtap: left promiscuous mode [ 520.216868][T16119] veth0_macvtap: left promiscuous mode [ 520.223415][T16119] veth1_vlan: left promiscuous mode [ 520.228771][T16119] veth0_vlan: left promiscuous mode [ 520.257619][T19250] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3883'. [ 520.277832][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3883'. [ 520.847945][T16119] team0 (unregistering): Port device team_slave_1 removed [ 520.899361][T16119] team0 (unregistering): Port device team_slave_0 removed [ 521.582316][T19171] chnl_net:caif_netlink_parms(): no params data found [ 521.592926][T19254] netlink: 'syz.3.3884': attribute type 7 has an invalid length. [ 521.638126][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 521.773474][T19263] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 521.827120][T19265] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 521.869295][ T5840] Bluetooth: hci3: command tx timeout [ 522.137167][T19171] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.145089][T19171] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.156498][T19171] bridge_slave_0: entered allmulticast mode [ 522.166562][T19171] bridge_slave_0: entered promiscuous mode [ 522.192007][T19171] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.209772][T19171] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.268802][T19171] bridge_slave_1: entered allmulticast mode [ 522.306895][T19171] bridge_slave_1: entered promiscuous mode [ 522.440429][T19171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.503886][T19171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.837422][T19171] team0: Port device team_slave_0 added [ 522.861171][T19171] team0: Port device team_slave_1 added [ 523.058875][T19171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.090703][T19171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.173751][T19171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.198827][T19323] x_tables: duplicate underflow at hook 1 [ 523.216043][T19171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.244896][T19171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.322087][T19171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.608326][T19171] hsr_slave_0: entered promiscuous mode [ 523.633522][T19171] hsr_slave_1: entered promiscuous mode [ 523.654808][T19171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.681082][T19171] Cannot create hsr debugfs directory [ 523.950866][ T5840] Bluetooth: hci3: command tx timeout [ 524.281189][T19372] __nla_validate_parse: 2 callbacks suppressed [ 524.281209][T19372] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3920'. [ 524.585790][T19379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.881259][T19171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 524.894037][T19171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 524.907458][T19387] tipc: Trying to set illegal importance in message [ 524.918670][T19171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 524.933696][T19171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 525.266913][T19171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.308372][T19171] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.321910][T16117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 525.356593][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.363880][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.484811][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.492292][T16113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.526198][T19408] syzkaller1: entered promiscuous mode [ 525.532060][T19408] syzkaller1: entered allmulticast mode [ 525.672571][T19418] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3933'. [ 526.030253][ T5840] Bluetooth: hci3: command tx timeout [ 526.051737][T19430] openvswitch: netlink: Actions may not be safe on all matching packets [ 526.268272][T19171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.345815][T19171] veth0_vlan: entered promiscuous mode [ 526.406549][T19171] veth1_vlan: entered promiscuous mode [ 526.488023][T19171] veth0_macvtap: entered promiscuous mode [ 526.539778][T19171] veth1_macvtap: entered promiscuous mode [ 526.545404][T19445] sctp: [Deprecated]: syz.3.3942 (pid 19445) Use of int in maxseg socket option. [ 526.545404][T19445] Use struct sctp_assoc_value instead [ 526.616183][T19171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.663234][T19171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.713102][T19171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.739579][T19171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.740787][T19452] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 526.758694][T19171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.768813][T19171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.794551][T19455] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3945'. [ 526.842551][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3944'. [ 526.856248][T19452] team0: Device hsr_slave_0 failed to register rx_handler [ 526.906528][T19455] vlan3: entered allmulticast mode [ 526.918345][T19455] erspan0: entered allmulticast mode [ 527.187220][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.217917][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.322480][T16113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.348061][T16113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.454125][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3950'. [ 527.664393][T19477] tap0: tun_chr_ioctl cmd 1074025677 [ 527.681952][T19477] tap0: linktype set to 65534 [ 527.965569][T19494] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 528.215482][T16117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.699087][T16117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.019555][T16117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.095471][T16117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.196127][T16117] bridge_slave_1: left allmulticast mode [ 529.202356][T16117] bridge_slave_1: left promiscuous mode [ 529.208095][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.218244][T16117] bridge_slave_0: left allmulticast mode [ 529.224451][T16117] bridge_slave_0: left promiscuous mode [ 529.231165][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.588063][T16117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.600169][T16117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.610781][T16117] bond0 (unregistering): Released all slaves [ 529.940373][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3965'. [ 530.440261][T16120] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 530.470363][T16117] hsr_slave_0: left promiscuous mode [ 530.471700][T16120] ------------[ cut here ]------------ [ 530.496495][T16117] hsr_slave_1: left promiscuous mode [ 530.520090][T16120] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 530.535517][T16117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.548750][T16120] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 530.555159][T16117] batman_adv: batadv0: Removing interface: batadv_slave_0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 530.598807][T16120] CPU: 0 UID: 0 PID: 16120 Comm: kworker/u8:47 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 530.598839][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.598852][T16120] Workqueue: events_unbound cfg80211_wiphy_work [ 530.598882][T16120] Call Trace: [ 530.598890][T16120] [ 530.598899][T16120] dump_stack_lvl+0x189/0x250 [ 530.598937][T16120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.598969][T16120] ? __pfx__printk+0x10/0x10 [ 530.599006][T16120] ubsan_epilogue+0xa/0x40 [ 530.599029][T16120] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 530.599069][T16120] ieee80211_request_ibss_scan+0x600/0x8b0 [ 530.599116][T16120] ieee80211_ibss_work+0xd85/0x1060 [ 530.599150][T16120] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.599182][T16120] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 530.599211][T16120] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 530.599241][T16120] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 530.599276][T16120] ? skb_dequeue+0x10e/0x150 [ 530.599293][T16120] ? ieee80211_iface_work+0xcdb/0xfe0 [ 530.599328][T16120] ? ieee80211_iface_work+0xf39/0xfe0 [ 530.599362][T16120] ? rcu_is_watching+0x15/0xb0 [ 530.599400][T16120] cfg80211_wiphy_work+0x2dc/0x460 [ 530.599435][T16120] ? process_scheduled_works+0x9ef/0x17b0 [ 530.599476][T16120] process_scheduled_works+0xae1/0x17b0 [ 530.599560][T16120] ? __pfx_process_scheduled_works+0x10/0x10 [ 530.599612][T16120] worker_thread+0x8a0/0xda0 [ 530.599663][T16120] kthread+0x70e/0x8a0 [ 530.599690][T16120] ? __pfx_worker_thread+0x10/0x10 [ 530.599721][T16120] ? __pfx_kthread+0x10/0x10 [ 530.599746][T16120] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.599774][T16120] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.599801][T16120] ? __pfx_kthread+0x10/0x10 [ 530.599825][T16120] ret_from_fork+0x3f9/0x770 [ 530.599858][T16120] ? __pfx_ret_from_fork+0x10/0x10 [ 530.599894][T16120] ? __switch_to_asm+0x39/0x70 [ 530.599913][T16120] ? __switch_to_asm+0x33/0x70 [ 530.599932][T16120] ? __pfx_kthread+0x10/0x10 [ 530.599962][T16120] ret_from_fork_asm+0x1a/0x30 [ 530.600003][T16120] [ 530.861981][T16120] ---[ end trace ]--- [ 530.866047][T16120] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 530.873273][T16120] CPU: 0 UID: 0 PID: 16120 Comm: kworker/u8:47 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 530.885633][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.895721][T16120] Workqueue: events_unbound cfg80211_wiphy_work [ 530.902005][T16120] Call Trace: [ 530.905330][T16120] [ 530.908315][T16120] dump_stack_lvl+0x99/0x250 [ 530.912952][T16120] ? __asan_memcpy+0x40/0x70 [ 530.917567][T16120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.922795][T16120] ? __pfx__printk+0x10/0x10 [ 530.927417][T16120] panic+0x2db/0x790 [ 530.931362][T16120] ? __pfx_panic+0x10/0x10 [ 530.935812][T16120] ? _printk+0xcf/0x120 [ 530.939984][T16120] ? __pfx__printk+0x10/0x10 [ 530.944603][T16120] check_panic_on_warn+0x89/0xb0 [ 530.949577][T16120] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 530.955333][T16120] ieee80211_request_ibss_scan+0x600/0x8b0 [ 530.961179][T16120] ieee80211_ibss_work+0xd85/0x1060 [ 530.966518][T16120] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.971783][T16120] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 530.977740][T16120] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 530.984106][T16120] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 530.989767][T16120] ? skb_dequeue+0x10e/0x150 [ 530.994396][T16120] ? ieee80211_iface_work+0xcdb/0xfe0 [ 530.999914][T16120] ? ieee80211_iface_work+0xf39/0xfe0 [ 531.005316][T16120] ? rcu_is_watching+0x15/0xb0 [ 531.010114][T16120] cfg80211_wiphy_work+0x2dc/0x460 [ 531.015241][T16120] ? process_scheduled_works+0x9ef/0x17b0 [ 531.021012][T16120] process_scheduled_works+0xae1/0x17b0 [ 531.026619][T16120] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.032662][T16120] worker_thread+0x8a0/0xda0 [ 531.037319][T16120] kthread+0x70e/0x8a0 [ 531.041427][T16120] ? __pfx_worker_thread+0x10/0x10 [ 531.046571][T16120] ? __pfx_kthread+0x10/0x10 [ 531.051187][T16120] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.056411][T16120] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.061628][T16120] ? __pfx_kthread+0x10/0x10 [ 531.066239][T16120] ret_from_fork+0x3f9/0x770 [ 531.070872][T16120] ? __pfx_ret_from_fork+0x10/0x10 [ 531.076029][T16120] ? __switch_to_asm+0x39/0x70 [ 531.080812][T16120] ? __switch_to_asm+0x33/0x70 [ 531.085590][T16120] ? __pfx_kthread+0x10/0x10 [ 531.090290][T16120] ret_from_fork_asm+0x1a/0x30 [ 531.095090][T16120] [ 531.098416][T16120] Kernel Offset: disabled [ 531.102818][T16120] Rebooting in 86400 seconds..